The main goal of this project is to plan and implement foundational and scalable best-practice security measures for the protection of ABC Academy's Hinna software design project data, systems and networks.

We are building a small business management software that will deal with scheduling, billing, and client data that requires the strongest possible foundation for security of data and protection against bad actor threats.

This will involve several different steps for the learners, including:

• Analysing the existing security measures of Hinna and make a recommendation followed by implementation for our security
• Analyzing networks and systems and assessing areas for improvement
• Researching security measures that can be implemented
• Review the process for vulnerability testing and help develop any best proactive policies to keep up with the current cybersecurity landscape (future-proofing)
• Detecting and analysing any incidents, review incident reporting, and create an incident response plan
• Creating full developer knowledge base documentation for back- and front-end developers so they understand how to develop their part of Hinna with full functionality, preserving security, and speed.

The project involves the following technologies, which should be uninterrupted by the security implementation:

• AWS Hosting (incl. Cloud9 IDE, if needed)
• Java Backend
• SpringBoot Framework
• -Rabbit MQ Library
• Thymeleaf Templating Engine
• htmx Frontend

What we make is intended to be Simple, Speedy, and Secure. The security effort should contribute to these standards, and not detract from them. Novel solutions for preserving speed while delivering high security will be happily reviewed.

We hope to have 2 main points of contact: The product owner, and hopefully a project manager. The product owner is available and intends to have regularly scheduled meetings to review and discuss progress. If there is no project manager, the product owner will function in this capacity, providing more hand-on guidance and response for sprint planning and retrospectives.